Privacy Policy
What we hold, and what we never do
Effective August 9, 2026
The short version
ThreadKnot has three parts and they are not equally private, so this policy treats them separately.
This website counts page views and button clicks, without cookies and without any identifier that could follow you. No accounts, no forms, no ads. The desktop app runs entirely on your own machines, with no account and no telemetry. The mobile app and its notification relay are the one part that does process data, and it holds the minimum needed to wake your phone. You can delete all of it at any time.
We never run ads, never sell or share your personal data, never record your behaviour, and never train any model on your content.
Who we are
ThreadKnot is operated by Smith Network Solutions. For the notification relay and for any billing data, Smith Network Solutions is the data controller: the party that decides what is collected and why.
You can reach us about anything in this policy at support@smithnetworksolutions.com.
The website
This site is static marketing material. There is no account to create, no form to fill in, no advertising and no third-party tracker. Fonts are served from this site rather than fetched from a font provider, so reading these pages does not report you to a font company.
We do count page views and clicks, using Vercel Web Analytics. We want to know whether people find the download button and which platform they pick. That is the entire ambition.
What the counting does and does not involve
It is first-party and cookieless. Vercel Web Analytics sets no cookie and stores no identifier on your device, so it cannot follow you between sessions or across other websites. There is no profile of you anywhere, because there is nothing to attach one to.
What we see is a count. Specifically:
- Which page was viewed, and the referring site if there was one.
- Which buttons were clicked: downloads and the platform chosen, GitHub links, quickstart commands copied, and which FAQ entries were opened.
- Coarse technical context that arrives with any web request: country, browser, and whether you are on a phone or a desktop.
We never record your screen, replay your session, watch your mouse, or capture anything you type. We do not run heatmaps. The four commitments below apply to this website exactly as they apply to the apps.
You can switch it off with any content blocker, and the site works identically. Nothing on this site depends on being counted.
The site is hosted by Vercel, which also processes standard technical information such as your IP address and browser details in order to serve pages and protect against abuse. That processing is governed by Vercel’s privacy policy.
The desktop app
The desktop app runs on your own machines. There is no account to create and no telemetry. Your threads, your code, your prompts and your agent transcripts are written to disk on the machine that ran them and stay there. We never receive them.
You do not have to take our word for it. The app is open source under Apache 2.0, so the claim is checkable line by line in the repository.
Data on your own machines is yours to delete directly. We cannot delete it for you because we never had it.
The mobile app and the notification relay
This is the part of ThreadKnot that genuinely processes data, so it gets the most detail.
A phone cannot be woken by your own computer across a network on its own. Delivering a notification requires a relay and requires Apple or Google to carry the final step. That is the whole reason this component exists.
What the relay holds
- Push notification tokens, which are what let Apple or Google wake your phone.
- Device and server pairing identifiers, so a notification reaches the right device and no other.
- Notification payloads while they are being delivered, held only for as long as delivery requires.
We store the minimum that delivery requires, and nothing that would let us reconstruct your work.
What we never do
These commitments are the same ones shown inside the mobile app, and they apply to every part of ThreadKnot:
What we never do
- No advertising, ad identifiers, or ad networks.
- No selling or sharing of personal data with third parties.
- No behavioural analytics or session recording.
- No training of any model on your content.
Who processes data on our behalf
Push delivery uses Apple Push Notification service and Firebase Cloud Messaging, because that is the only way a phone can be woken.
Apple Push Notification service
Delivers notifications to iPhones and iPads. Their privacy policy.
Firebase Cloud Messaging
Delivers notifications to Android devices. Their privacy policy.
Vercel
Serves this website and handles its technical logs. Their privacy policy.
If you subscribe
Not in effect today
There are no paid plans today and nothing in this subsection is collected. This subsection applies only if and when you subscribe.
If we introduce an optional paid subscription, we would collect your billing email, your subscription status and plan, your country for tax purposes, and payment records from our payment processor such as card brand and the last four digits. We would never receive or store your full card number.
Payments would be handled by Stripe (privacy policy), acting as our payment processor.
Billing records have to be kept for as long as tax and accounting law requires, even after you delete your account. Everything else follows the 24-hour deletion commitment below.
The four commitments apply to paid exactly as they apply to free. Subscribing would never change any of them:
What we never do
- No advertising, ad identifiers, or ad networks.
- No selling or sharing of personal data with third parties.
- No behavioural analytics or session recording.
- No training of any model on your content.
A subscription would buy you connectivity to your own machines. It would never buy us the right to your content.
Agent providers and other third parties
Agent providers you connect on your own machine, such as Anthropic, OpenAI and others, receive whatever you send those agents, under those providers’ own terms. ThreadKnot is not a party to that exchange.
ThreadKnot never collects, stores or transmits the credentials for those services. The app launches the official command line tools you have already installed and signed in yourself.
Your rights and how to use them
You can delete everything the relay holds at any time from Settings → Account & data in the mobile app, or by writing to support@smithnetworksolutions.com. Data on your own machines is yours to delete directly.
We answer requests within 30 days, and deletions complete within 24 hours.
If you are in the EEA, the UK or California you may have additional rights, including access to what we hold, correction of anything inaccurate, portability of your data, and the right not to be discriminated against for exercising any of them. You can exercise all of these through the same address, support@smithnetworksolutions.com, and we will not make you jump through a different process to do it.
How long we keep things
Relay data persists only while your account and pairing exist. When you delete either, or ask us to, it is removed within 24 hours.
The single exception is billing records, if paid plans ever exist, which tax and accounting law requires us to retain for longer.
Security
Traffic to and from the relay is encrypted in transit. Access is token-gated: a client that cannot present a valid token is refused, and paired mobile devices hold their own revocable credential that we store only as a hash.
Our main security measure is not holding much in the first place. We are not going to claim more than that. No system is perfectly secure, and anyone telling you otherwise is selling something.
Children
ThreadKnot is a developer tool and is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has provided us data, write to support@smithnetworksolutions.com and we will delete it.
Changes to this policy
Changes are posted on this page with a new effective date. If we materially change what the relay stores, we will say so plainly at the top of this page rather than slipping it into a paragraph and hoping nobody reads it.
Contact
Questions, requests and complaints all go to the same place: support@smithnetworksolutions.com.
Questions about this document? Write to support@smithnetworksolutions.com.